JetBrains GoLand vulnerabilities

5 known CVE vulnerabilities in JetBrains GoLand, translated and rated.

CVE-2026-86506Medium
In JetBrains GoLand before 2026.2.2.1, missing authentication on the GoLand profiler's injected pprof server exposed profiling data.
CVE-2026-64803High
In JetBrains GoLand before 2026.2, arbitrary code execution was possible before granting project trust via the configured Go SDK.
CVE-2026-64802High
In JetBrains GoLand before 2026.2, arbitrary code execution was possible before granting project trust in the Go Modules integration.
CVE-2026-64800Low
In JetBrains GoLand before 2026.2 sensitive configuration values are written to log files by default.
CVE-2026-53915High
In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS